← ISO 27001 Annex A in plain English

A.8.18 A.8

Technological / A.8.18

Restricting use of privileged utility programs

Think of it likeThe crowbar lives in the locked shed, not by the back door.

In plain English

The family restricts the tools that can bypass its own protections, because a tool that overrides a lock is as good as a key.

Related CSF and CIS controls (unofficial mapping)